Mériem Toumi

• Responsible for cybersecurity governance, risk management, and compliance. • Managing security requirements for client platforms from tendering to maintenance. • Formalizing security procedures and ensuring their implementation. • Facilitating internal cybersecurity committee and client committees. • Coordinating security actions between the clients, the Business Unit, and R&D. • Raising awareness of best practices and cybersecurity regulations: GDPR, NIS2 and the Cyberresilience Act • Organizing internal and external audits and ensuring follow-up on recommendations. • Management of cybersecurity aspects in suppliers’ contracts. • Participating in inter-company working groups on personal data protection.

• Security audit Organizational and technical audit (ISO/IEC 27001 and ISO 27002) Architecture audit Security and quality audit of service providers • Training and awareness Awareness program design Training design and delivery • Support for securing architectures: Identification of vulnerabilities and associated security risks Development of action plans to secure architectures. Support for projects in implementing recommended measures.

Digital Trust Infrastructure DTI - Architecture de Confiance Digitale

Intégration de solutions de sécurité informatiques, avant-vente et accompagnement des clients dans leurs projets de transformation. SIEM: Splunk, Parefeu: Palo Alto, Passerelles mail: ProofPoint, Virtualisation: VMware et Veeam, Monitoring web: GFI Web Monitor, Monitoring réseaux: Solarwinds Projets: - Mise en place du SIEM Splunk - Mise en place d’un cluster de passerelles mail Proofpoint - Conception d'une architecture sécurisée utilisant des pare-feux Palo Alto